@daniel333 I am co-presenter on the link posted below by felipesewaybricker. I left Splunk year ago and co founded https://www.outcoldsolutions.com, our company is specialized on providing Monitoring Solutions for Containers and consulting around Splunk + Containers. I am author of Splunk images, so I know them from the ground. Feel free to shoot me email, especially if your company is looking for professional consulting on this topic.
Basically I didn't have my head around the core concepts in docker when it comes to data persistence. Had to stop, do some Docker 101 training then the material above made a lot of sense. Thanks!